The FIRFilter::evaluateFilterMulti function in FIRFilter.cpp in libSoundTouch.a in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch.

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - soundtouch: Heap corruption in WavFileBase class in WavFile.cpp (CVE-2018-17098)

  - soundtouch version up to and including 2.0.0 contains a Buffer Overflow vulnerability in     SoundStretch/WavFile.cpp:WavInFile::readHeaderBlock() that can result in arbitrary code execution. This     attack appear to be exploitable via victim must open maliocius file in soundstretch utility.
    (CVE-2018-1000223)

  - The RateTransposer::setChannels function in RateTransposer.cpp in libSoundTouch.a in Olli Parviainen     SoundTouch 2.0 allows remote attackers to cause a denial of service (assertion failure and application     exit), as demonstrated by SoundStretch. (CVE-2018-14044)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

Security fix for CVE-2018-14044, CVE-2018-14045 and CVE-2018-1000223

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
199101	RHEL 8 : soundtouch (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	high
196765	RHEL 8 : soundtouch (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	high
120911	Fedora 28 : soundtouch (2018-f4f75985b8)	Nessus	Fedora Local Security Checks	high
112102	Fedora 27 : soundtouch (2018-fadf6f5a9f)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2018-14045

high

Tenable Plugins

high

high

high

high